HR 6206 IHCommentsClose CommentsPermalink

To establish the Small Business Information Security Task Force, and for other purposes.CommentsClose CommentsPermalink

June 9, 2008CommentsClose CommentsPermalink

Mr. MANZULLO (for himself and Mr. MICHAUD) introduced the following bill; which was referred to the Committee on Small BusinessCommentsClose CommentsPermalink

To establish the Small Business Information Security Task Force, and for other purposes.CommentsClose CommentsPermalink

Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,CommentsClose CommentsPermalink

SECTION 1. SHORT TITLE.

This Act may be cited as the ‘Small Business Information Security Act of 2008’.CommentsClose CommentsPermalink

SEC. 2. DEFINITIONS.

In this Act--CommentsClose CommentsPermalink





(1) the terms ‘Administration’ and ‘Administrator’ mean the Small Business Administration and the Administrator thereof, respectively;CommentsClose CommentsPermalink





(2) the term ‘small business concern’ has the same meaning as in section 3 of the Small Business Act (15 U.S.C. 632); andCommentsClose CommentsPermalink





(3) the term ‘task force’ means the task force established under section 3(a).CommentsClose CommentsPermalink

SEC. 3. INFORMATION SECURITY TASK FORCE.

(a) Establishment- The Administrator shall establish a task force, to be known as the Small Business Information Security Task Force, to address the information technology security needs of small business concerns.CommentsClose CommentsPermalink





(b) Duties- The task force shall--CommentsClose CommentsPermalink





(1) identify--CommentsClose CommentsPermalink





(A) the information technology security needs of small business concerns; andCommentsClose CommentsPermalink





(B) the programs and services provided by the Federal Government, State Governments, and nongovernment organizations that serve those needs;CommentsClose CommentsPermalink





(2) assess the extent to which the programs and services identified under paragraph (1)(B) serve the needs identified under paragraph (1)(A);CommentsClose CommentsPermalink





(3) make recommendations to the Administrator on how to more effectively serve the needs identified under paragraph (1)(A) through--CommentsClose CommentsPermalink





(A) programs and services identified under paragraph (1)(B); andCommentsClose CommentsPermalink





(B) new programs and services promoted by the task force;CommentsClose CommentsPermalink





(4) make recommendations on how the Administrator may promote--CommentsClose CommentsPermalink





(A) new programs and services that the task force recommends under paragraph (3)(B); andCommentsClose CommentsPermalink





(B) programs and services identified under paragraph (1)(B);CommentsClose CommentsPermalink





(5) make recommendations on how the Administrator may inform and educate with respect to--CommentsClose CommentsPermalink





(A) the needs identified under paragraph (1)(A);CommentsClose CommentsPermalink





(B) new programs and services that the task force recommends under paragraph (3)(B); andCommentsClose CommentsPermalink





(C) programs and services identified under paragraph (1)(B);CommentsClose CommentsPermalink





(6) make recommendations on how the Administrator may more effectively work with public and private interests to address the information technology security needs of small business concerns; andCommentsClose CommentsPermalink





(7) make recommendations on the creation of a permanent advisory board that would make recommendations to the Administrator on how to address the information technology security needs of small business concerns.CommentsClose CommentsPermalink





(c) Internet Website Recommendations- The task force shall make recommendations to the Administrator relating to the establishment of an Internet website to be used by the Administration to receive and dispense information and resources with respect to the needs identified under subsection (b)(1)(A) and the programs and services identified under subsection (b)(1)(B). As part of the recommendations, the task force shall identify the Internet sites of appropriate programs, services, and organizations, both public and private, to which the Internet website should link.CommentsClose CommentsPermalink





(d) Education Programs- The task force shall make recommendations to the Administrator relating to developing additional education materials and programs with respect to the needs identified under subsection (b)(1)(A).CommentsClose CommentsPermalink





(e) Existing Materials- The task force shall organize and distribute existing materials that inform and educate with respect to the needs identified under subsection (b)(1)(A) and the programs and services identified under subsection (b)(1)(B).CommentsClose CommentsPermalink





(f) Coordination With Public and Private Sector- In carrying out its responsibilities under this section, the task force shall coordinate with, and may accept materials and assistance as it determines appropriate from--CommentsClose CommentsPermalink





(1) any subordinate officer of the Administrator;CommentsClose CommentsPermalink





(2) any organization authorized by the Small Business Act to provide assistance and advice to small business concerns;CommentsClose CommentsPermalink





(3) other Federal agencies, their officers, or employees; andCommentsClose CommentsPermalink





(4) any other organization, entity, or person not described in paragraph (1), (2), or (3).CommentsClose CommentsPermalink





(g) Chair and Vice-Chair- The task force shall have--CommentsClose CommentsPermalink





(1) a Chair, appointed by the Administrator; andCommentsClose CommentsPermalink





(2) a Vice-Chair, appointed by the Administrator, in consultation with appropriate nongovernmental organizations, entities, or persons.CommentsClose CommentsPermalink





(h) Members-CommentsClose CommentsPermalink





(1) CHAIR AND VICE-CHAIR- The Chair and the Vice-Chair shall serve as members of the task force.CommentsClose CommentsPermalink





(2) ADDITIONAL MEMBERS-CommentsClose CommentsPermalink





(A) IN GENERAL- The task force shall have additional members, each of whom shall be appointed by the Chair, with the approval of the Administrator.CommentsClose CommentsPermalink





(B) NUMBER OF MEMBERS- The number of additional members shall be determined by the Chair, in consultation with the Administrator, except that--CommentsClose CommentsPermalink





(i) the additional members shall include, for each of the groups specified in paragraph (3), at least 1 member appointed from within that group; andCommentsClose CommentsPermalink





(ii) the number of additional members shall not exceed 13.CommentsClose CommentsPermalink





(3) GROUPS REPRESENTED- The groups specified in this paragraph are--CommentsClose CommentsPermalink





(A) subject matter experts;CommentsClose CommentsPermalink





(B) users of information technologies within small business concerns;CommentsClose CommentsPermalink





(C) vendors of information technologies to small business concerns;CommentsClose CommentsPermalink





(D) academics with expertise in the use of information technologies to support business;CommentsClose CommentsPermalink





(E) small business trade associations;CommentsClose CommentsPermalink





(F) Federal, State, or local agencies engaged in securing cyberspace; andCommentsClose CommentsPermalink





(G) information technology training providers with expertise in the use of information technologies to support business.CommentsClose CommentsPermalink





(i) Meetings-CommentsClose CommentsPermalink





(1) FREQUENCY- The task force shall meet at least 2 times per year, and more frequently if necessary to perform its duties.CommentsClose CommentsPermalink





(2) QUORUM- A majority of the members of the task force shall constitute a quorum.CommentsClose CommentsPermalink





(3) LOCATION- The Administrator shall designate, and make available to the task force, a location at a facility under the control of the Administrator for use by the task force for its meetings.CommentsClose CommentsPermalink





(4) MINUTES-CommentsClose CommentsPermalink





(A) IN GENERAL- Not later than 90 days after each meeting, the task force shall publish the minutes of the meeting and shall submit to Administrator any findings or recommendations approved at the meeting.CommentsClose CommentsPermalink





(B) SUBMISSION TO CONGRESS- Not later than 60 days after the date that the Administrator receives minutes under subparagraph (A), the Administrator shall submit to the Committee on Small Business and Entrepreneurship of the Senate and the Committee on Small Business of the House of Representatives such minutes, together with any comments the Administrator considers appropriate.CommentsClose CommentsPermalink





(5) FINDINGS-CommentsClose CommentsPermalink





(A) IN GENERAL- Not later than the date that the task force terminates under subsection (m), the task force shall submit to the Administrator a final report on any findings and recommendations of the task force approved at a meeting of the task force.CommentsClose CommentsPermalink





(B) SUBMISSION TO CONGRESS- Not later than 90 days after the date that the Administrator receives the report under subparagraph (A), the Administrator shall submit to the Committee on Small Business and Entrepreneurship of the Senate and the Committee on Small Business of the House of Representatives the full text of the report submitted under subparagraph (A), together with any comments the Administrator considers appropriate.CommentsClose CommentsPermalink





(j) Personnel Matters-CommentsClose CommentsPermalink





(1) COMPENSATION OF MEMBERS- Each member of the task force shall serve without pay for their service on the task force.CommentsClose CommentsPermalink





(2) TRAVEL EXPENSES- Each member of the task force shall receive travel expenses, including per diem in lieu of subsistence, in accordance with applicable provisions under subchapter I of chapter 57 of title 5, United States Code.CommentsClose CommentsPermalink





(3) DETAIL OF SBA EMPLOYEES- The Administrator may detail, without reimbursement, any of the personnel of the Administration to the task force to assist it in carrying out its duties. Such a detail shall be without interruption or loss of civil status or privilege.CommentsClose CommentsPermalink





(4) SBA SUPPORT OF THE TASK FORCE- Upon the request of the task force, the Administrator shall provide to the task force the administrative support services that the Administrator and the Chair jointly determine to be necessary for the task force to carry out its duties.CommentsClose CommentsPermalink





(k) Not Subject to Federal Advisory Committee Act- The Federal Advisory Committee Act (5 U.S.C. App.) shall not apply to the task force.CommentsClose CommentsPermalink





(l) Startup Deadlines- The initial appointment of the members of the task force shall be completed not later than 90 days after the date of enactment of this Act, and the first meeting of the task force shall be not later than 180 days after the date of enactment of this Act.CommentsClose CommentsPermalink





(m) Termination-CommentsClose CommentsPermalink





(1) IN GENERAL- Except as provided in paragraph (2), the task force shall terminate at the end of fiscal year 2012.CommentsClose CommentsPermalink





(2) EXCEPTION- If, as of the termination date under paragraph (1), the task force has not complied with subsection (i)(4) with respect to 1 or more meetings, then the task force shall continue after the termination date for the sole purpose of achieving compliance with subsection (i)(4) with respect to those meetings.CommentsClose CommentsPermalink





(n) Authorization of Appropriations- There are authorized to be appropriated to carry out this section $200,000 for each of fiscal years 2009 through 2012.CommentsClose CommentsPermalink